Sean Wallbridge
How to monitor mailbox access by auditing or by viewing Mailbox Resources in Exchange Server
Seems everyone I speak to assumes that if someone accessed someone else’s Exchange Mailbox, that the access attempt would be logged. This is the not the case. The default in Exchange is not to have ‘Logon’ access set to minimum (Which is needed, at a minimum ;).
So, crank up your logging (crank it up in Windows too) or when you need to investigate/prove something, you will have nothing to go on…